🟢 Low ⏱ 5–15 min Last verified: 2 June 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7625-1 Related CVEs: CVE-2018-19960 CVE-2022-21689 Upstream summary: It was discovered that OnionShare could be exploited when run with the –debug argument. A local attacker could possibly use this issue to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202208-21 Related CVEs: CVE-2021-3405 Upstream summary: On 32bit builds of libebml, the length of a string is miscalculated, potentially leading to an exploitable heap overflow. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5160-1 Related CVEs: CVE-2021-36370 Upstream summary: It was discovered that Midnight Commander would not check server fingerprints when establishing an SFTP connection. If a remote attacker were able to intercept […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5998-1 Related CVEs: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVE-2019-17571 CVE-2021-4104 Upstream summary: It was discovered that the SocketServer component of Apache Log4j 1.2 incorrectly handled deserialization. An attacker could possibly use this […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2022 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:2912-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3639 Upstream summary: A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9930 Related CVEs: CVE-2022-3028 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
SELinux (Security-Enhanced Linux) is a mandatory access control (MAC) framework built into the Linux kernel, developed by the NSA and now maintained as a core part of RHEL. Unlike traditional discretionary access control (DAC) where file permissions determine access, SELinux enforces policies that confine every process to the minimum resources it legitimately needs — even […]
🟡 Medium ⏱ 5–30 min Last verified: 2 June 2022 Affected versions: Ubuntu 22.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0500-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-23437 Upstream summary: There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ […]
🟡 Medium ⏱ 15–45 min Last verified: 1 June 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-29692, IBM Support Bulletin CVE: CVE-2021-29692 NVD summary: IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport […]
